[2021-New] Amazon AWS-Solution-Architect-Associate Dumps With Update Exam Questions (241-250)

AWS-Solution-Architect-Associate Dumps

AWS-Solution-Architect-Associate Exam Questions - Online Test

AWS-Solution-Architect-Associate Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Q1. You are building a system to distribute confidential documents to employees. Using CIoudFront, what method could be used to serve content that is stored in S3, but not publically accessible from S3 directly?

A. Add the CIoudFront account security group "amazon-cf/amazon-cf-sg" to the appropriate S3 bucket policy.

B. Create a S3 bucket policy that lists the C|oudFront distribution ID as the Principal and the target bucket as the Amazon Resource Name (ARN).

C. Create an Identity and Access Management (IAM) User for CIoudFront and grant access to the objects in your S3 bucket to that IAM User.

D. Create an Origin Access Identity (OAI) for CIoudFront and grant access to the objects in your S3 bucket to that OAI.

Answer: D

Explanation:

You restrict access to Amazon S3 content by creating an origin access identity, which is a special CIoudFront user. You change Amazon S3 permissions to give the origin access identity permission to access your objects, and to remove permissions from everyone else. When your users access your Amazon S3 objects using CIoudFront URLs, the CIoudFront origin access identity gets the objects on your users' behalf. If your users try to access objects using Amazon S3 URLs, they're denied access. The origin access identity has permission to access objects in your Amazon S3 bucket, but users don't. Reference:

http://docs.aws.amazon.com/AmazonCIoudFront/latest/Deve|operGuide/private-content-restricting-acces s-to-s3.htmI

Q2. A group can contain many users. Can a user belong to multiple groups?

A. Yes always

B. No

C. Yes but only if they are using two factor authentication

D. Yes but only in VPC

Answer: A

Q3. What does Amazon Cloud Formation provide?

A. The ability to setup Autoscaling for Amazon EC2 instances.

B. None of these.

C. A templated resource creation for Amazon Web Services.

D. A template to map network resources for Amazon Web Services.

Answer: D

Q4. You have a Business support plan with AWS. One of your EC2 instances is running Mcrosoft Windows Server 2008 R2 and you are having problems with the software. Can you receive support from AWS for this software?

A. Yes

B. No, AWS does not support any third-party software.

C. No, Mcrosoft Windows Server 2008 R2 is not supported.

D. No, you need to be on the enterprise support plan.

Answer: A

Explanation:

Third-party software support is available only to AWS Support customers enrolled for Business or Enterprise Support. Third-party support applies only to software running on Amazon EC2 and does not extend to assisting with on-premises software. An exception to this is a VPN tunnel configuration running supported devices for Amazon VPC.

Reference: https://aws.amazon.com/premiumsupport/features/

Q5. Can I move a Reserved Instance from one Region to another?

A. No

B. Only if they are moving into GovC|oud

C. Yes

D. Only if they are moving to US East from another region

Answer: A

Q6. Select the incorrect statement

A. In Amazon EC2, the private IP addresses only returned to Amazon EC2 when the instance is stopped or terminated

B. In Amazon VPC, an instance retains its private IP addresses when the instance is stopped.

C. In Amazon VPC, an instance does NOT retain its private IP addresses when the instance is stopped.

D. In Amazon EC2, the private IP address is associated exclusive ly with the instance for its lifetime

Answer: C

Q7. Mike is appointed as Cloud Consultant in Netcrak Inc. Netcrak has the following VPCs set-up in the US East Region:

A VPC with CIDR block 10.10.0.0/16, a subnet in that VPC with CIDR block 10.10.1.0/24 A VPC with CIDR block 10.40.0.0/16, a subnet in that VPC with CIDR block 10.40.1.0/24

Netcrak Inc is trying to establish network connection between two subnets, a subnet with CIDR block 10.10.1.0/24 and another subnet with CIDR block 10.40.1.0/24. Which one of the following solutions should Mke recommend to Netcrak Inc?

A. Create 2 Virtual Private Gateways and configure one with each VPC.

B. Create one EC2 instance in each subnet, assign Elastic IPs to both instances, and configure a set up Site-to-Site VPN connection between both EC2 instances.

C. Create a VPC Peering connection between both VPCs.

D. Create 2 Internet Gateways, and attach one to each VPC.

Answer: C

Explanation:

A VPC peering connection is a networking connection between two VPCs that enables you to route traffic between them using private IP addresses. EC2 instances in either VPC can communicate with each other as if they are within the same network. You can create a VPC peering connection between your own VPCs, or with a VPC in another AWS account within a single region.

AWS uses the existing infrastructure of a VPC to create a VPC peering connection; it is neither a gateway nor a VPN connection, and does not rely on a separate piece of physical hardware.

Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-peering.htm|

Q8. A client needs you to import some existing infrastructure from a dedicated hosting provider to AWS to try and save on the cost of running his current website. He also needs an automated process that manages backups, software patching, automatic failure detection, and recovery. You are aware that his existing set up currently uses an Oracle database. Which of the following AWS databases would be best for accomplishing this task?

A. Amazon RDS

B. Amazon Redshift

C. Amazon SimpIeDB

D. Amazon EIastiCache

Answer: A

Explanation:

Amazon RDS gives you access to the capabilities of a familiar MySQL, Oracle, SQL Server, or PostgreSQL database engine. This means that the code, applications, and tools you already use today with your existing databases can be used with Amazon RDS. Amazon RDS automatically patches the database software and backs up your database, storing the backups for a user-defined retention period and enabling point-in-time recovery.

Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Welcome.html

Q9. Which Amazon service can I use to define a virtual network that closely resembles a traditional data center?

A. Amazon VPC

B. Amazon Service Bus

C. Amazon EMR

D. Amazon RDS

Answer: A

Q10. Which of the following statements is true of creating a launch configuration using an EC2 instance?

A. The launch configuration can be created only using the Query APIs.

B. Auto Scaling automatically creates a launch configuration directly from an EC2 instance.

C. A user should manually create a launch configuration before creating an Auto Scaling group.

D. The launch configuration should be created manually from the AWS CLI.

Answer: B

Explanation:

You can create an Auto Scaling group directly from an EC2 instance. When you use this feature, Auto Scaling automatically creates a launch configuration for you as well.

Reference:

http://docs.aws.amazon.com/AutoScaling/latest/DeveIoperGuide/create-Ic-with-instancelD.htmI